StarkWare's Quantum-Safe Bitcoin: Works Great, Just Don't Check the GPU Bill

A StarkWare researcher has cooked up a way to make Bitcoin transactions quantum-proof without touching the protocol. In a proposal published Thursday, chief product officer Avihu Levy unveiled the Quantum Safe Bitcoin (QSB) scheme, which he claims would hold up even against an adversary running Shor's algorithm on a monster quantum machine. The best part? Zero soft fork required—it runs entirely within existing legacy script constraints.

The catch? You'll need a serious graphics card setup. We're talking $75 to $150 per transaction in GPU compute costs. That's not exactly coffee money. Levy himself admitted it's likely not useful for everyday transactions and would only make sense for securing massive BTC holdings.

The scheme works by swapping the standard proof-of-work signature puzzle for a hash-to-sig puzzle. Instead of relying on elliptic curve math that quantum computers can crack, the spender must brute-force an input whose hash output happens to look like a valid ECDSA signature. Even a quantum computer can't shortcut that particular kind of brute force.

Bitcoin's quantum problem has the community more divided than a hard fork debate. StarkWare CEO Eli Ben-Sasson called it "huge"—essentially making Bitcoin quantum-safe today. But Bitcoin ESG specialist Daniel Batten called that an "overstatement," noting exposed public keys and dormant wallets aren't addressed in the paper. We're looking at roughly 1.7 million BTC locked in early P2PK addresses that could theoretically be cracked.

The researchers acknowledged this is a last-resort measure. Transactions would be non-standard, costs don't scale, and Lightning Network isn't covered. Protocol-level changes remain the preferred long-term path.

Meanwhile, Lightning Labs CTO Olaoluwa Osuntokun published a quantum "escape hatch" prototype this week that lets users prove wallet ownership from their seed phrase without revealing it—an alternative authorization method worth watching.